make.conf Question

[Adam Stroud]

All:

I have been playing around with make.conf and I see that it is possible to
to use the "NO_OPENSSH" variable to not build openssh when updating fbsd
from source.  I also noticed in the /etc/defaults/rc.conf file that there is
a "sshd_program" entry that can be used to adjust where the installation of
sshd is.  I am assuming that this means that I can install openssh from the
ports exclusively and use the rc.conf file to launch the ports sshd on
startup.  Here are my questions about this:

1.  Is my assumption correct?
2.  Does this also apply to things like kerberos and openssl
3.  Does this impose any notable side effects to the system (possibly with
stability/security)?

Thanks
A